
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json)
Hash identifier: vu9dscQVHOHLIIlrzwdIAi1CrOPA6nMbwiRnDIbVmBs=
Subject key identifier: 46:31:B7:F4:32:10:0B:0B:04:7B:ED:AD:03:C5:45:AE:B8:0B:9B:C1
Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A
Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
Certificate serial: 07AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
Manifest number: 078F
Signing time: Fri 12 Jun 2026 21:36:44 +0000
Manifest this update: Fri 12 Jun 2026 21:36:43 +0000
Manifest next update: Fri 19 Jun 2026 21:36:43 +0000
Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: l2pODtzYFKK7rBBnDgwToMkhACP6PjGWOXQXriH9hGQ=)
2: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=)
3: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=)
4: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl
rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A
Validity
Not Before: Jun 12 21:36:43 2026 GMT
Not After : Jun 19 21:36:43 2026 GMT
Subject: CN=6a2c7beb-57e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:56:f6:48:fd:ba:e5:23:93:75:20:bd:7b:
f2:cb:30:6d:3f:f1:19:e6:39:95:b9:2c:9b:3a:1e:
91:40:d5:6f:ac:71:25:86:b2:e0:b7:9c:e2:bb:b6:
d6:f0:78:a0:50:a0:95:96:5f:36:c2:07:c6:68:81:
ab:cf:c5:7e:fb:96:39:05:c8:53:1f:ce:f3:19:1e:
b2:f2:d3:bd:3f:c5:3a:0b:7d:80:10:b0:00:83:a2:
63:02:eb:33:66:38:fc:fc:f9:cd:10:5d:05:f3:c5:
c5:1b:99:37:f5:dd:f1:37:9a:d8:8b:70:d6:d4:c0:
a3:e0:f1:63:4c:d7:16:74:62:00:17:16:3b:a4:e3:
0b:f2:11:a7:53:a3:5b:ef:79:0e:c9:ed:f3:cb:f1:
cc:e5:25:9a:ab:0c:89:fa:64:4a:fc:4d:ea:db:2f:
e9:55:07:66:3e:54:cb:96:1e:05:1e:02:9d:cb:84:
0c:0d:39:62:97:50:88:78:e1:1e:7f:1f:bf:65:8e:
d4:37:22:03:15:c8:15:c3:f6:c8:75:99:f7:44:d0:
a5:e1:61:d9:c0:26:90:f8:42:63:92:34:bf:14:9f:
01:70:30:44:18:46:eb:73:c9:a0:e9:90:80:88:80:
97:a0:4e:75:ce:24:19:88:f5:e8:99:2d:9d:f3:57:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:31:B7:F4:32:10:0B:0B:04:7B:ED:AD:03:C5:45:AE:B8:0B:9B:C1
X509v3 Authority Key Identifier:
keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4a:16:64:2e:58:aa:34:ca:fa:79:4d:29:7a:b0:97:6a:2b:
66:96:67:83:bf:5e:30:3c:50:2a:44:7f:16:80:85:ff:aa:29:
67:f9:d1:ce:f0:5b:04:3d:95:c2:a1:3b:e3:57:6c:a5:d2:2d:
b2:0e:2d:67:0d:bb:e9:60:7e:6e:07:3a:18:c9:a0:60:1f:d7:
8a:94:08:fb:6d:64:a7:12:96:03:80:4d:2d:47:ba:f9:72:51:
82:ad:77:d5:47:ba:3c:d3:c1:9f:e0:9f:54:aa:25:55:4d:d2:
bb:d1:b5:68:ab:5e:4f:2a:a2:d4:82:35:a1:a5:7c:1a:cd:17:
14:32:a7:b5:a2:ff:24:57:79:ea:5f:0a:05:c9:2f:06:03:cd:
da:ad:f2:c7:9a:eb:41:0a:dc:ba:63:1b:ee:55:10:e2:d8:02:
7a:07:5b:b9:47:6f:91:e2:ff:67:6c:dc:79:d3:24:e5:c9:f8:
43:54:d3:11:aa:1b:2e:c0:aa:03:b1:44:52:63:2c:b0:dc:c0:
5e:ef:0d:6a:d9:8f:01:f4:d4:c7:1e:46:b6:75:65:dc:0b:bd:
20:49:39:6a:82:18:59:f2:ac:84:7d:0f:51:55:e0:b0:44:21:
22:75:a6:fd:cd:cc:39:c6:6e:c3:ee:ae:df:0b:8e:54:f8:32:
ad:24:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:03 2026 by rpki-client